惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

博客园 - Franky
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
有赞技术团队
有赞技术团队
aimingoo的专栏
aimingoo的专栏
WordPress大学
WordPress大学
人人都是产品经理
人人都是产品经理
酷 壳 – CoolShell
酷 壳 – CoolShell
L
LangChain Blog
Blog — PlanetScale
Blog — PlanetScale
阮一峰的网络日志
阮一峰的网络日志
Microsoft Azure Blog
Microsoft Azure Blog
云风的 BLOG
云风的 BLOG
Google DeepMind News
Google DeepMind News
T
The Blog of Author Tim Ferriss
G
Google Developers Blog
Hugging Face - Blog
Hugging Face - Blog
Y
Y Combinator Blog
D
DataBreaches.Net
Engineering at Meta
Engineering at Meta
MyScale Blog
MyScale Blog
大猫的无限游戏
大猫的无限游戏
S
SegmentFault 最新的问题
The GitHub Blog
The GitHub Blog
Recent Announcements
Recent Announcements

www.infosecurity-magazine.com

Just Three Ransomware Gangs Accounted for 40% of Attacks Last Month Google Chrome Rolls Out Protection Against Infostealers Targeting Session Cookies STX RAT Targets Finance Sector With Advanced Stealth Tactics Bitcoin Depot Reports $3.6m Crypto Theft After System Breach Atomic Stealer MacOS ClickFix Attack Bypasses Apple Security Warnings Middle East Hack-for-Hire Operation Traced to South Asian Cyber Espionage Group Governance Gaps Emerge as AI Agents Drive 76% Increase in NHIs Google Warns of New Threat Group Targeting BPOs and Helpdesks Google API Keys Quietly Gain Access to Gemini on Android Devices Critical Vulnerability in Ninja Forms Exposes WordPress Sites Anthropic Launches Project Glasswing to Use AI to Find and Fix Critical Software Vulnerabilities US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers Claude Discovers Apache ActiveMQ Bug Hidden for 13 Years Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT Assets Russian APT28 Hackers Hijack Routers to Steal Credentials, UK Security Agency Warns GPU Rowhammer Attack Enables Privilege Escalation and Full System Compromise GrafanaGhost Exploit Bypasses AI Guardrails for Silent Data Exfiltration Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI Storm-1175 Exploits Flaws in High-Velocity Medusa Attacks Fortinet Releases Emergency Patch After FortiClient EMS Bug Is Exploited New Phishing Platform Used in Credential Theft Campaigns Against C-Suite Execs New 'Storm' Infostealer Remotely Decrypts Stolen Credentials NCSC Issues Security Alert Over Hackers Targeting WhatsApp and Signal Accounts Apple Expands iOS 18 Security Updates Amid DarkSword Threat Researchers Observe Sub-One-Hour Ransomware Attacks GitHub Used as Covert Channel in Multi-Stage Malware Campaign Most CNI Firms Face Up to £5m in Downtime from OT Attacks Google Introduces Android Dev Verification Amid Openness Debate New Venom Stealer MaaS Platform Automates Continuous Data Theft Chinese Hackers Target European Governments in Espionage Campaigns
Android 17 Beta Introduces Secure-By-Default Architecture
2026-02-17 · via www.infosecurity-magazine.com

A new beta version of Android 17 has been released, bringing a range of privacy, security and performance changes aimed at strengthening app protections and improving developer workflows.

The update marks the first public beta of the mobile operating system and introduces structural changes that will affect how developers build and test apps ahead of its final release.

The release signals a shift toward tighter default security settings, alongside a move away from the traditional Developer Preview model. Android is replacing this with a continuous Canary channel designed to provide earlier access to features and streamline testing.

Privacy and Security Enhancements

Android 17 introduces two major security updates. The android:usesCleartextTraffic attribute has been deprecated, and apps targeting API level 37 that enable cleartext traffic without a corresponding network security configuration will have such traffic blocked by default.

Developers are being urged to migrate to network security configuration files for more granular control.

Support for HPKE hybrid cryptography has also been added via a new public Service Provider Interface (SPI), enabling secure communication that combines public-key and symmetric encryption.

Additionally, certificate transparency is now enabled by default, and new install-time permissions aim to improve protections around localhost interactions.

Read more on Android security updates: Google Releases Patches for Android Zero-Day Flaws Exploited in the Wild

Performance and Large-Screen Changes

Beyond security and privacy improvements, apps targeting Android 17 will now need to adapt to new requirements on large-screen devices. Orientation and resizability restrictions are being phased out for screens with a smallest width of 600dp or more, meaning certain manifest attributes and APIs will be ignored.

The update also introduces a lock-free MessageQueue implementation and generational garbage collection in ART, both intended to reduce CPU overhead and improve frame consistency.

Google said platform stability is targeted for March, when the final SDK and NDK APIs will be delivered. Developers will then have several months to test before the final release.

Android 17 will continue to receive quarterly updates, with planned app-breaking changes expected in Q2 and a minor SDK release scheduled for Q4. The new Canary channel will provide faster feature access, over-the-air (OTA) updates and improved integration with continuous integration workflows.

Image credit: Alex Photo Stock / Shutterstock.com